Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q8ekGZrW4H7NksefVePApsazszI.roa
File: q8ekGZrW4H7NksefVePApsazszI.roa (raw, json)
Hash identifier: YuuEqqZlEK4+SVsWnCkXvpAT9EBT5NLxdvvEH//g4Do=
Subject key identifier: AB:C7:A4:19:9A:D6:E0:7E:CD:92:C7:9F:55:E3:C0:A6:C6:B3:B3:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E3B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q8ekGZrW4H7NksefVePApsazszI.roa
Signing time: Wed 27 Apr 2022 08:58:57 +0000
ROA not before: Wed 27 Apr 2022 08:58:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7739 (0x1e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Apr 27 08:58:57 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ABC7A4199AD6E07ECD92C79F55E3C0A6C6B3B332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:89:31:67:b4:80:3d:11:8d:3a:08:39:93:
5c:ae:62:5f:8b:82:9e:c3:30:20:26:3f:81:3b:f1:
8d:81:55:0e:3e:68:0c:a9:a0:46:9e:a7:51:91:35:
18:fa:9b:24:ed:60:20:5f:36:0d:b1:a2:2e:96:62:
c1:54:78:dd:4f:59:f4:88:2a:df:0b:a0:16:e3:4a:
17:9f:da:81:86:e0:0f:5b:dc:55:9c:8c:af:8f:2e:
80:ac:23:ef:4b:56:f9:57:50:5b:b3:e4:34:03:40:
7e:44:df:fa:b7:01:d4:cc:c2:0a:2b:5f:ef:56:57:
93:b2:cd:29:d8:d5:f2:59:e7:3f:56:d1:ad:7e:29:
42:ed:16:42:7f:e9:45:e0:ac:89:f9:f8:76:39:ce:
35:f9:f9:21:e5:a9:97:b1:23:01:2d:b5:e1:88:18:
46:e1:c5:6a:10:15:c2:a0:60:5a:6f:25:2a:da:82:
41:1a:f6:1d:7d:20:94:51:7a:32:97:1c:49:f5:b2:
50:c7:c6:b2:9e:9e:3e:dd:58:29:36:d2:23:ec:1e:
07:91:6e:08:be:13:be:8f:99:49:c0:fa:bd:84:d1:
f2:6a:fe:1d:ba:56:f6:e6:79:ce:27:dd:48:a1:9e:
06:ca:ca:fd:72:c3:52:31:c9:04:43:29:44:26:5b:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:A4:19:9A:D6:E0:7E:CD:92:C7:9F:55:E3:C0:A6:C6:B3:B3:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q8ekGZrW4H7NksefVePApsazszI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.188.0/22
Signature Algorithm: sha256WithRSAEncryption
18:bd:75:1c:89:bf:7d:96:f6:2b:a8:9e:07:88:42:39:81:2f:
13:39:d3:64:f7:60:d2:25:8e:0f:f0:1c:de:50:c6:26:a4:39:
f9:75:40:61:ab:f9:fa:e9:2e:fe:4b:ce:2c:a7:5d:04:88:a9:
5f:28:42:d4:a8:bd:c3:96:93:ee:56:68:4e:85:9a:1f:3b:fd:
d2:73:45:4f:dc:5c:a3:23:03:3c:ed:36:3d:88:14:a8:ec:6c:
22:d6:06:3d:3d:7f:38:bf:dd:87:a8:5d:98:06:35:cc:2f:da:
28:60:81:85:8f:9b:9d:c5:c5:73:92:73:b2:4e:5b:cc:3a:6f:
40:29:05:38:6b:7a:89:e8:fd:fd:58:3e:27:2a:39:62:77:d7:
49:35:7b:48:37:b1:7e:4a:3d:d1:6e:1a:0b:fa:e4:a3:41:53:
ff:4a:20:16:73:b1:1a:0a:79:fa:91:03:07:56:11:d4:2c:c6:
4e:4e:bf:78:3d:7c:88:e9:a1:7e:0a:cc:5d:ab:05:e9:64:1d:
0e:c3:f7:13:d4:b0:a8:a8:f9:f0:12:6c:6e:09:84:c2:8e:37:
7d:c7:cc:4f:f1:78:a6:97:8c:51:7a:ff:25:dd:04:23:35:75:
e6:21:ef:ce:e7:f3:2f:30:30:1e:90:9f:06:a8:c1:90:5c:92:
42:9d:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:38 2025 by rpki-client